Abstract: The present disclosure is directed to a ransomware detection component or an anti-ransomware application that detects, stops, and removes ransomware from a computing system. In one embodiment, the anti-ransomware application may prevent new ransomware from infecting one or more components of the system or remove or disable existing ransomware that is already present on the system.